What’s Vulnerable › Vulnerabilities
CVE-2020-5735: Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability
- Severity: high (CVSS 8.8 v3.1)
- Exploited in the wild: yes — in CISA KEV since 2021-11-03
- EPSS: 36.2% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2020-04-08 · updated 2026-06-17
- Weakness: CWE-121
Description
Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.
Affected products
- Amcrest 1080-Lite 8Ch Firmware: all versions
- Amcrest Amdv10814-H5 Firmware: all versions
- Amcrest Ip2M-841-V3 Firmware: before v2.800.0000000.6.r.200314 — fixed in v2.800.0000000.6.r.200314
- Amcrest Ip2M-841 Firmware: before v2.420.ac00.18.r.20200217 — fixed in v2.420.ac00.18.r.20200217
- Amcrest Ip2M-853Ew Firmware: before v2.623.00ac004.0.r.200316 — fixed in v2.623.00ac004.0.r.200316
- Amcrest Ip2M-858W Firmware: before v2.623.00ac004.0.r.200316 — fixed in v2.623.00ac004.0.r.200316
- Amcrest Ip2M-866Ew Firmware: before v2.623.00ac004.0.r.200316 — fixed in v2.623.00ac004.0.r.200316
- Amcrest Ip2M-866W Firmware: before v2.623.00ac004.0.r.200316 — fixed in v2.623.00ac004.0.r.200316
- Amcrest Ip4M-1053Ew Firmware: before v2.623.00ac004.0.r.200316 — fixed in v2.623.00ac004.0.r.200316
- Amcrest Ip8M-2454Ew Firmware: before v2.622.00ac000.0.r.200320 — fixed in v2.622.00ac000.0.r.200320
- Amcrest Ip8M-2493Eb Firmware: before v2.622.00ac000.0.r.200320 — fixed in v2.622.00ac000.0.r.200320
- Amcrest Ip8M-2496Eb Firmware: before v2.622.00ac000.0.r.200320 — fixed in v2.622.00ac000.0.r.200320
- Amcrest Ip8M-2597E Firmware: before v2.800.00ac000.0.r.200330 — fixed in v2.800.00ac000.0.r.200330
- Amcrest Ip8M-Mb2546Ew Firmware: before v2.622.00ac000.0.r.200320 — fixed in v2.622.00ac000.0.r.200320
- Amcrest Ip8M-Mt2544Ew Firmware: before v2.622.00ac000.0.r.200320 — fixed in v2.622.00ac000.0.r.200320
- Amcrest Ip8M-T2499Ew Firmware: before v2.622.00ac000.0.r.200320 — fixed in v2.622.00ac000.0.r.200320
- Amcrest Ipm-721 Firmware: before v2.420.ac00.18.r.20200217 — fixed in v2.420.ac00.18.r.20200217
- Amcrest Ipm-Hx1 Firmware: before v2.420.ac00.18.r.20200217 — fixed in v2.420.ac00.18.r.20200217
How to fix
Upgrade to a fixed version: Amcrest Ip2M-841-V3 Firmware v2.800.0000000.6.r.200314; Amcrest Ip2M-841 Firmware v2.420.ac00.18.r.20200217; Amcrest Ip2M-853Ew Firmware v2.623.00ac004.0.r.200316; Amcrest Ip2M-858W Firmware v2.623.00ac004.0.r.200316; Amcrest Ip2M-866Ew Firmware v2.623.00ac004.0.r.200316; Amcrest Ip2M-866W Firmware v2.623.00ac004.0.r.200316; Amcrest Ip4M-1053Ew Firmware v2.623.00ac004.0.r.200316; Amcrest Ip8M-2454Ew Firmware v2.622.00ac000.0.r.200320; Amcrest Ip8M-2493Eb Firmware v2.622.00ac000.0.r.200320; Amcrest Ip8M-2496Eb Firmware v2.622.00ac000.0.r.200320; Amcrest Ip8M-2597E Firmware v2.800.00ac000.0.r.200330; Amcrest Ip8M-Mb2546Ew Firmware v2.622.00ac000.0.r.200320. Check the vendor advisory for mitigations.
References
- http://packetstormsecurity.com/files/157164/Amcrest-Dahua-NVR-Camera-IP2M-841-Denial-Of-Service.html
- https://www.tenable.com/security/research/tra-2020-20
- http://packetstormsecurity.com/files/157164/Amcrest-Dahua-NVR-Camera-IP2M-841-Denial-Of-Service.html
- https://www.tenable.com/security/research/tra-2020-20
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-5735
Get alerted when CVE-2020-5735 or the next vulnerability affects your stack